redhat ansible automation platform

Name: redhat ansible automation platform
Brand: redhat

productUS

cpe:2.3:a:redhat:ansible_automation_platform:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical8high12medium0low

updated 2026-10-28

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	= 2.0
CVE-2026-48710US	medium6.5OT critical	70.3% (99th)	KEV	no fix	2026-05-26	2 versions
CVE-2023-3971US	medium5.4	0.81% (57th)	Exploit	no fix	2023-10-04	2 versions
CVE-2021-20228US	high7.5OT elevated	2.06% (81st)	—	no fix	2021-04-29	= 1.2
CVE-2023-50782US	high7.5	1.12% (66th)	—	no fix	2024-02-05	= 2.0
CVE-2023-5115US	medium6.3	1.01% (63rd)	—	no fix	2023-12-18	3 versions
CVE-2023-5189US	medium6.5	0.98% (62nd)	—	no fix	2023-11-14	= 2.0
CVE-2022-2568US	medium6.5	0.95% (61st)	—	no fix	2022-08-18	3 versions
CVE-2026-46625US	—	0.92% (60th)	—	no fix	2026-06-10	= 2.0
CVE-2021-3583US	high7.1	0.90% (59th)	—	no fix	2021-09-22	= 1.2
CVE-2026-44495US	high7.7	0.85% (58th)	—	no fix	2026-06-11	= 2.6
CVE-2023-4380US	medium6.3	0.64% (50th)	—	no fix	2023-10-04	= 2.4
CVE-2026-39979US	medium6.5	0.56% (46th)	—	no fix	2026-04-13	= 2.0
CVE-2023-5764US	high7.8	0.54% (45th)	—	no fix	2023-12-12	= 2.4
CVE-2022-3205US	medium6.1	0.51% (44th)	—	no fix	2022-09-13	2 versions
CVE-2022-1632US	medium6.5	0.42% (36th)	—	no fix	2022-09-01	= 2.0
CVE-2024-10033US	—	0.40% (34th)	—	no fix	2024-10-16	= 2.5
CVE-2024-0690US	medium5.5	0.30% (23rd)	—	no fix	2024-02-06	= 2.4
CVE-2022-3644US	medium5.5	0.30% (23rd)	—	no fix	2022-10-25	= 2.0
CVE-2023-4237US	high7.8	0.25% (17th)	—	no fix	2023-10-04	= 2.0
CVE-2021-4112US	high8.8	0.25% (16th)	—	no fix	2022-08-25	2 versions
CVE-2021-3681US	medium5.5	0.25% (16th)	—	no fix	2022-04-18	= 1.2
CVE-2025-9908US	—	0.22% (12th)	—	2.6	2026-02-27	< 2.6
CVE-2025-53862US	—	0.21% (11th)	—	no fix	2025-07-11	= 2.0
CVE-2025-9909US	—	0.18% (8th)	—	2.6	2026-02-27	< 2.6
CVE-2025-9907US	—	0.18% (8th)	—	2.6	2026-02-27	< 2.6
CVE-2025-57847US	—OT elevated	0.18% (7th)	—	no fix	2026-04-08	≤ 2.6
CVE-2025-53861US	—OT elevated	0.11% (1st)	—	no fix	2025-07-11	= 2.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-522Insufficiently Protected Credentials3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere2 CVEs
CWE-915Improperly Controlled Modification of Dynamically-Determined Object Attributes2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan